Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/356552-312a-44ce-8677-405505fc460e/1/TkB_fq2BapVV9HrxCQPvRcgXC4I.mft
File: TkB_fq2BapVV9HrxCQPvRcgXC4I.mft (raw, json)
Hash identifier: 8YAkKE0p0U5g2EP/nwsAS+4Y6ah5+TcpFS0/f0x3Hi8=
Subject key identifier: 0E:E6:B2:FB:A5:BB:DF:3A:A7:73:3B:C3:EE:6D:6F:EF:C1:5E:41:D8
Authority key identifier: 4E:40:7F:7E:AD:81:6A:95:55:F4:7A:F1:09:03:EF:45:C8:17:0B:82
Certificate issuer: /CN=4e407f7ead816a9555f47af10903ef45c8170b82
Certificate serial: 019D9BBE77705DC65BF7CD6FD023E656D1D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TkB_fq2BapVV9HrxCQPvRcgXC4I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/356552-312a-44ce-8677-405505fc460e/1/TkB_fq2BapVV9HrxCQPvRcgXC4I.mft
Manifest number: 09A7
Signing time: Fri 17 Apr 2026 14:00:43 +0000
Manifest this update: Fri 17 Apr 2026 14:00:43 +0000
Manifest next update: Sat 18 Apr 2026 14:00:43 +0000
Files and hashes: 1: TkB_fq2BapVV9HrxCQPvRcgXC4I.crl (hash: jPRLb95f9CgkbMVuXqpeGMr9W9HNwnnAIUl6x0OLpXg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/356552-312a-44ce-8677-405505fc460e/1/TkB_fq2BapVV9HrxCQPvRcgXC4I.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/356552-312a-44ce-8677-405505fc460e/1/TkB_fq2BapVV9HrxCQPvRcgXC4I.mft
rsync://rpki.ripe.net/repository/DEFAULT/TkB_fq2BapVV9HrxCQPvRcgXC4I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 14:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:be:77:70:5d:c6:5b:f7:cd:6f:d0:23:e6:56:d1:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e407f7ead816a9555f47af10903ef45c8170b82
Validity
Not Before: Apr 17 14:00:43 2026 GMT
Not After : Apr 18 14:00:43 2026 GMT
Subject: CN=0ee6b2fba5bbdf3aa7733bc3ee6d6fefc15e41d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:5c:62:b5:bf:14:2e:69:77:d6:ec:69:46:08:
0d:ef:bf:48:40:7b:d4:25:09:91:c0:8f:0e:fc:1b:
0e:5b:62:a6:d8:e0:41:43:bf:18:99:d5:d2:4f:c7:
f4:ae:af:a9:77:0c:72:17:ad:be:57:06:08:d9:4e:
9e:e7:01:b6:99:5f:46:73:d2:71:5e:ac:f1:d9:59:
78:12:35:ad:94:41:e8:19:a4:67:37:25:d0:5b:93:
50:9b:7d:9b:f3:41:01:a5:6c:18:0a:18:ed:82:f9:
8a:95:a7:f8:87:81:8d:9a:f8:9f:06:ff:dc:5a:a0:
d8:90:31:93:11:48:e8:c8:90:52:2c:00:8b:7e:2c:
e1:97:73:84:91:0e:b2:44:31:09:d6:0f:0e:6b:ac:
20:48:7a:20:2e:7b:40:f4:c4:35:bc:51:a3:09:83:
ef:e3:10:df:56:7f:a6:1c:a3:f5:d7:84:42:5c:7d:
f0:6f:c7:6c:58:07:07:83:73:11:b7:1c:de:4f:a7:
42:af:03:22:4d:e1:18:e5:88:8b:40:d9:21:3b:3a:
85:c2:fe:2a:e7:14:79:10:3d:4b:cb:be:88:b9:36:
bc:40:38:dd:86:8d:5b:08:2e:bc:5c:43:76:62:ec:
c4:6f:e2:53:58:93:a2:c6:c4:a2:46:c5:5c:70:ff:
69:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:E6:B2:FB:A5:BB:DF:3A:A7:73:3B:C3:EE:6D:6F:EF:C1:5E:41:D8
X509v3 Authority Key Identifier:
keyid:4E:40:7F:7E:AD:81:6A:95:55:F4:7A:F1:09:03:EF:45:C8:17:0B:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TkB_fq2BapVV9HrxCQPvRcgXC4I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/356552-312a-44ce-8677-405505fc460e/1/TkB_fq2BapVV9HrxCQPvRcgXC4I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/356552-312a-44ce-8677-405505fc460e/1/TkB_fq2BapVV9HrxCQPvRcgXC4I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:5f:6c:ac:6f:d6:79:72:81:e3:17:19:e2:cb:bd:8e:3f:7f:
13:19:94:40:a2:9f:8e:8f:d7:33:da:37:7f:d3:45:f2:19:6e:
5b:e0:c2:e4:6c:bc:8d:24:c4:47:c9:4b:58:f3:e3:37:c3:b4:
c9:49:57:36:25:37:65:14:20:a9:f4:69:ca:f8:cd:39:23:64:
02:0b:df:0d:4d:51:b1:19:e3:bf:e7:fe:be:f3:99:58:89:1e:
a8:de:45:87:b1:ef:ff:51:01:c2:a1:7b:77:47:6b:26:7b:b1:
4d:39:8a:b9:39:b3:ba:96:12:74:9c:d4:8e:c0:63:e8:1f:6c:
5c:39:d5:d8:e2:bf:a9:70:3e:b3:fb:19:5e:8d:72:83:ab:b8:
60:c3:bf:9f:d9:c1:fc:f2:00:35:63:90:07:f7:22:50:44:b4:
95:d9:e0:8d:82:2f:1e:65:38:64:c6:2e:73:83:e8:7d:39:00:
a9:4f:81:bf:30:53:14:88:39:0c:8f:21:93:3f:75:a5:36:20:
7f:a5:3a:b1:eb:0c:02:9b:ad:06:46:d7:3f:a4:20:cc:f1:20:
87:15:6a:e0:89:6c:05:bc:8f:5d:2b:b0:fb:cc:2a:19:f0:a2:
79:c5:72:37:0f:ab:96:40:38:6c:f9:83:7f:8f:47:31:7a:de:
e6:a1:31:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 20:31:06 2026 by rpki-client